Creates a role to which privileges and other roles can be
    granted. A role can be granted to a user or another role. For
    example, you can create a role for members of a department.
    When a user leaves the department, the departmental role can
    be revoked from that user and thus exclude that user's access to
    the departmental data.